Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa
File:                     bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa (raw, json)
Hash identifier:          IsmQtDP+yo6nJrvB3+3PBWeRitk9mGSLxzrrxuSiHb4=
Subject key identifier:   27:9B:3D:2F:7C:00:92:1A:3E:E7:59:7C:15:2E:69:1F:16:A5:AF:D5
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584563F308C7D0AC361DDFC3F900
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     1403
IP address blocks:        67.221.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:08:c7:d0:ac:36:1d:df:c3:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=af373b07-1730-4ac8-9aa8-6cf75efeb53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:0c:88:83:b5:4a:76:28:51:34:38:b7:cf:
                    39:85:1d:b5:4f:57:d9:73:e0:8b:28:40:02:8d:b8:
                    40:4c:16:5f:31:62:71:e9:1b:a6:dd:a4:9e:d7:27:
                    5d:e7:21:99:ba:c7:0d:e9:2f:9d:b9:33:33:26:8e:
                    fe:49:85:e9:2c:46:f5:8f:31:a6:92:95:35:7d:02:
                    16:da:86:f9:e2:04:bd:4b:d1:23:13:f6:17:6f:b7:
                    96:5d:57:c4:2c:c8:a2:d8:0d:30:f7:df:f4:4f:ab:
                    35:b1:4b:80:fb:e4:22:a1:02:bd:aa:d6:d6:b2:a3:
                    b3:8f:72:08:5a:b3:cd:16:a7:4f:b8:5f:a0:5f:f0:
                    3e:50:3a:a9:0e:e5:d9:12:0b:15:17:ae:62:3a:ba:
                    63:11:17:5c:90:53:80:cc:92:75:94:7e:aa:18:83:
                    b0:4e:ad:8a:b9:e4:8c:7a:9e:91:74:f8:85:f5:49:
                    94:eb:cc:0e:67:43:c6:ef:89:a5:52:90:9f:31:af:
                    b2:d9:e9:cf:a3:35:69:f6:64:c9:42:ed:71:2e:6f:
                    d4:cd:87:dd:22:b2:b7:00:1c:55:a1:47:e6:61:82:
                    fd:fa:d4:48:fa:77:09:79:cb:ed:ac:da:18:10:95:
                    59:37:68:af:a9:2e:48:22:72:be:b8:65:ce:c7:3a:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:3D:2F:7C:00:92:1A:3E:E7:59:7C:15:2E:69:1F:16:A5:AF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:83:4c:7f:ee:1c:0d:b1:a7:4b:d7:89:e0:9b:da:25:db:fb:
         8b:ad:1c:c0:e1:c1:75:21:cf:cc:44:93:bd:b4:8d:d1:52:94:
         7f:4a:ca:4e:b5:bc:14:d9:65:59:c3:3f:af:28:f6:04:9e:94:
         4d:90:32:6f:55:93:fc:a9:7d:56:7f:62:db:ae:02:f2:71:3e:
         66:43:16:5f:46:5b:cc:fb:b5:25:8b:08:40:b4:1a:c3:c4:18:
         60:4a:f9:c9:05:0b:dc:1e:41:0e:8c:5e:27:73:d4:d4:59:08:
         a2:b6:62:20:6f:ed:84:c6:89:7c:7c:a0:2d:33:1d:d4:94:75:
         07:af:10:19:8b:f0:52:5d:4c:18:e5:9f:e4:80:cf:f2:5d:f8:
         8e:f1:4b:9d:a5:e4:cb:00:23:59:c6:f8:12:7a:f0:f0:8d:de:
         06:47:94:4e:1a:da:06:d3:82:32:ad:8c:3f:bd:20:a0:86:b4:
         46:62:3e:f5:3d:c2:16:87:f0:b8:f6:94:d8:20:5a:32:d0:4b:
         81:ee:bd:4f:51:20:fa:52:60:9a:d3:f4:14:92:06:ef:29:58:
         8e:07:f2:b9:cb:e3:61:61:ae:a7:73:39:1f:6f:4f:49:cf:05:
         fe:52:53:67:43:3b:9b:18:e2:b4:a0:31:75:66:54:aa:13:4c:
         00:6a:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:20 2024 by rpki-client on console-fra.rpki-client.org